OPENSUSE-SU-2023:0131-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP5 chromium

openSUSE:Leap 15.5 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2023-3214

related CVE-2023-3215

related CVE-2023-3216

related CVE-2023-3217

upstream CVE-2023-3214

upstream CVE-2023-3215

upstream CVE-2023-3216

upstream CVE-2023-3217

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2023:0131-1

This update for chromium fixes the following issues: Chromium 114.0.5735.133 (boo#1212302): - CVE-2023-3214: Use after free in Autofill payments - CVE-2023-3215: Use after free in WebRTC - CVE-2023-3216: Type Confusion in V8 - CVE-2023-3217: Use after free in WebXR - Various fixes from internal audits, fuzzing and other initiatives

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1212302
https://lists.opensuse.org/archives/list/[email protected]/thread/6XOUMHRLZFACMSHLALXG5SSFCC2YA6X7/
https://www.suse.com/security/cve/CVE-2023-3214
https://www.suse.com/security/cve/CVE-2023-3215
https://www.suse.com/security/cve/CVE-2023-3216
https://www.suse.com/security/cve/CVE-2023-3217